CVE-2024-1704: ZhongBangKeJi CRMEB crud delete path traversal

Published Feb 21, 2024

Updated

A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It has been declared as critical. This vulnerability affects the function save/delete of the file /adminapi/system/crud. The manipulation leads to path traversal. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-254392. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

crmeb crmeb=5.2.2

Event History

Feb 21, 2024

CVE Published

via MITRE·05:31 PM

Data Sourced

via MITRE·05:31 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-1704?

CVE-2024-1704 is classified as a critical vulnerability due to its potential impact.

How do I fix CVE-2024-1704?

To fix CVE-2024-1704, it is recommended to update to the latest version of CRMEB that addresses this vulnerability.

What type of vulnerability is CVE-2024-1704?

CVE-2024-1704 is a path traversal vulnerability affecting the save/delete function in CRMEB 5.2.2.

Which software versions are affected by CVE-2024-1704?

CVE-2024-1704 affects CRMEB version 5.2.2.

What are the potential consequences of exploiting CVE-2024-1704?

Exploitation of CVE-2024-1704 may allow an attacker to access sensitive files on the server.